The process ctfmon.exe:252 makes changes in a system registry.The Trojan-PSW deletes the following value(s) in system registry:The Trojan-PSW disables automatic startup of the application by deleting the following autorun value: